diff --git a/apparmor.d/groups/systemd/systemd-logind b/apparmor.d/groups/systemd/systemd-logind index 5acbbadf4..482e4915f 100644 --- a/apparmor.d/groups/systemd/systemd-logind +++ b/apparmor.d/groups/systemd/systemd-logind @@ -66,6 +66,8 @@ profile systemd-logind @{exec_path} flags=(complain) { /dev/dri/card[0-9]* rw, /dev/tty[0-9]* rw, /dev/nvme* r, + /dev/shm/ r, + /dev/mqueue/ r, @{sys}/module/vt/parameters/default_utf8 r, @{sys}/fs/cgroup/memory/memory.limit_in_bytes r, diff --git a/apparmor.d/profiles-a-l/blkid b/apparmor.d/profiles-a-l/blkid index 5331b9e53..3558237f0 100644 --- a/apparmor.d/profiles-a-l/blkid +++ b/apparmor.d/profiles-a-l/blkid @@ -1,5 +1,6 @@ # apparmor.d - Full set of apparmor profiles # Copyright (C) 2019-2021 Mikhail Morfikov +# 2021 Alexandre Pujol # SPDX-License-Identifier: GPL-2.0-only abi , @@ -18,6 +19,7 @@ profile blkid @{exec_path} { # The standard location of the cache file # Without owner here if this tool should be used as a regular user + @{run}/blkid/ rw, @{run}/blkid/blkid.tab{,-*} rw, @{run}/blkid/blkid.tab.old rwl -> @{run}/blkid/blkid.tab, # When the system doesn't have the /run/ dir, the cache file is placed under /etc/ diff --git a/apparmor.d/profiles-a-l/git b/apparmor.d/profiles-a-l/git index 21352a132..21ea6791d 100644 --- a/apparmor.d/profiles-a-l/git +++ b/apparmor.d/profiles-a-l/git @@ -49,6 +49,8 @@ profile git @{exec_path} { /{usr/,}bin/{,ba,da}sh rix, /{usr/,}bin/{,e}grep rix, + /{usr/,}bin/cat rix, + /{usr/,}bin/dirname rix, /{usr/,}bin/pager rPx -> child-pager, /{usr/,}bin/less rPx -> child-pager,